Privacy notice

1. Controller and contact

Neanora GmbH i.G.
Stallauer-Berg-Weg 11
83670 Bad Heilbrunn
Germany

Represented by managing director Sebastian Manuel Rummel.
Email for enquiries and privacy requests: info@neanora.com

2. Website access and hosting

This website is provided through OpenAI’s ChatGPT Sites. Cloudflare services are also used for its technical operation. When you access a page, hosting and security services process data including your IP address, request date and time, the requested address, technical browser and operating system information, and connection and error data. A referring page is transmitted only if your browser sends it.

This processing serves to deliver the pages, maintain reliable operation, diagnose errors and protect against abusive access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a reliable and secure website.

OpenAI Ireland Ltd. is the designated contracting entity for customers in the European Economic Area. OpenAI engages subprocessors; its current list names Cloudflare, Ltd. for web hosting and content delivery. Further information is available in the Sites Terms, the Sites Data Processing Addendum and the subprocessor list.

3. Cookies, fonts and embedded content

Our page code does not set cookies or use Local Storage or Session Storage. We do not embed analytics or advertising services, social media plugins, remotely loaded fonts or videos. Fonts and graphics are served through this website.

The hosting platform’s security infrastructure may use cookies to prevent automated or abusive access. Cloudflare documents cookies including __cf_bm and cf_clearance for these purposes. These mechanisms protect the requested service. Where storage or access is strictly necessary for this purpose, section 25(2), no. 2 of the German TDDDG applies; processing of personal data is based on Article 6(1)(f) GDPR. Cloudflare’s cookie documentation explains their functions and lifetimes.

The initial language is determined by the domain you visit. You can choose a language using DE or EN. We do not use geolocation or store a language preference for this purpose.

4. Contact by email

Contact links open your email application. The website has no contact form. If you send us an email, we process your email address, message and any details you provide to handle your enquiry. We use Microsoft 365 for email, with Microsoft Ireland Operations Limited as a service provider.

Where an enquiry concerns steps towards, or performance of, a contract with you, the legal basis is Article 6(1)(b) GDPR. For other enquiries or communication with a company’s representatives, we rely on Article 6(1)(f) GDPR and our legitimate interest in handling business enquiries. Statutory retention obligations are based on Article 6(1)(c) GDPR.

5. Retention

Our website code does not maintain a visitor database or create its own persistent access logs. Retention of technical operational and security data depends on what is needed for content delivery, troubleshooting and abuse prevention, and on the hosting providers’ deletion rules. Security incidents or legal obligations may require longer retention.

We retain contact enquiries for as long as necessary to deal with the enquiry and related business transaction. They are then deleted unless statutory retention requirements or legitimate grounds for establishing, exercising or defending legal claims require further storage. Business records subject to statutory retention are deleted after the applicable legal period expires.

6. Recipients and processing outside the EU

Recipients include IT service providers for hosting, security and email, and the people handling your enquiry within our company. Data is disclosed to authorities or other parties where legally required or where necessary to establish or defend legal claims.

The hosting infrastructure is international. Processing exclusively in Germany or the EU is not guaranteed for this website; processing in the United States in particular is possible. OpenAI’s data processing terms provide for EU Standard Contractual Clauses or a European Commission adequacy decision for transfers from the European Economic Area. You may request information about the transfers and safeguards relevant to your data using the contact address above.

Microsoft 365 may also involve transfers or access outside the European Economic Area, for example for support or security operations. Microsoft describes the contractual safeguards in its Products and Services Data Protection Addendum and explains the continuing transfers within its EU Data Boundary services.

7. Your rights

Subject to the applicable legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

Right to object: Under Article 21 GDPR, you may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. To exercise your rights, contact info@neanora.com.

8. Complaints to a supervisory authority

Under Article 77 GDPR, you may complain to a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. The Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) supervises private-sector companies in Bavaria:

Promenade 18, 91522 Ansbach, Germany
Postal address: Postfach 1349, 91504 Ansbach, Germany
Submit a complaint to BayLDA

9. Providing personal data

Technical connection data is necessary to deliver the website to your device. Contacting us by email is voluntary; without the information needed to handle an enquiry, we may be unable to respond. We do not make solely automated decisions producing legal or similarly significant effects within the meaning of Article 22 GDPR.